The periodic "updateClock()" call made in the header for several of the
built-in skins (Eagle, Enhanced1, and Xekri) violates the new stricter
CSP, since it requires a JS eval. We don't need an eval here: we can
pass the function's name literally to window.setTimeout instead, which
treats it as a Function object, which doesn't need to be eval'd.
check-in: eac15b4c user: wyoung tags: trunk